CVE-2012-10060

Katalog CVE

CVSS 9.8 · Critical EPSS 4,3%

Kerentanan Stack-based Buffer Overflow pada sysax multi server. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code execution under the context of the service.

Rincian

Terbit di NVD

13 Agustus 2025

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

4,3% peluang dieksploitasi; lebih tinggi dari 91,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://advisories.checkpoint.com/defense/advisories/public/2012/cpai-23-sepc.html advisory pihak ketiga
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ssh/sysax_ssh_us... exploit · advisory pihak ketiga
• https://web.archive.org/web/20120302203344/http://www.pwnag3.com/2012/02/sysax-multi-server-ssh-username-explo... exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/sysax-multi-server-ssh-username-buffer-overflow advisory pihak ketiga
• https://www.exploit-db.com/exploits/18535 exploit · vdb entry
• https://www.exploit-db.com/exploits/18557 exploit · vdb entry
• https://www.sysax.com/ product